Fingerprint unlock/calls allowed after reboot

spiral

I have a user profile which has a fingerprint configured but disallows fingerprint screen unlocking.

After a standard reboot, GOS will sometimes allow the configured fingerprint to access this user account from the lock screen, even though the option is not allowed for.

This same user account will sometimes after reboot also allow calls/texts from the owner account even though the settings don't allow for that.

I consider this to be a remarkable security hazard. Can someone please inspect this?

MetropleX

spiral After a standard reboot, GOS will sometimes allow the configured fingerprint to access this user account from the lock screen, even though the option is not allowed for.

I will create a profile and try to replicate this. [UPDATE] I can't replicate this on my Pixel 6a, I have ended session multiple times on the secondary user profile having denied fingerprint unlock access and it refuses to use it only bringing up the PIN entry. I will attempt again tomorrow after overnight reboot to confirm.

This same user account will sometimes after reboot also allow calls/texts from the owner account even though the settings don't allow for that.

The user account settings don't prevent incoming calls/sms it prevents outgoing calls and texts and access to contacts and recent call history.

spiral

MetropleX thanks for your reply.

I am running P6a like you, TP1A.220905.004.A2.2022091400

Regarding the fingerprint, this is consistently happening on my device - I've restarted several times with same behavior.

After reboot:
1- use pin to log into owner
2- switch to user account
3- login to this user with pin (fingerprint does not work here)
4- lock screen for the purpose of attempting to log back into user
5- user profile now accepts fingerprint for login

Settings/Security/Fingerprint Unlock/Allow Fingerprint Unlocking is set to OFF.

Once I toggle this setting to on then back to off this profile behaves as expected, where I'm unable to login to the user with fingerprint (must use pin) but, once logged in, I am able to use fingerprint for access to, for instance, password managers.

spiral

MetropleX I've updated to TP1A.220905.004.A2.2022092300

The exact same fingerprint issue persists.

MetropleX

spiral yes managed to replicate!

[UPDATE] Issue created on Tracker: https://github.com/GrapheneOS/os-issue-tracker/issues/1526
Linked:
https://github.com/GrapheneOS/os-issue-tracker/issues/1451

spiral

MetropleX thank you!

spiral

MetropleX TP1A.221005.003.2022100300 P6a, the fingerprint issue persists

spiral

MetropleX TP1A.221005.003.2022101800 the fingerprint issue persists

Nuttso

We can reproduce this on p6p. 3 different devices

spiral

This issue still persists.

vvf69107

still on pixel 7 newest stable